
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier: mmWdk6ta/qIgKgj4pZ/dvi2etjCDXjv/kfqnGr19Vt4=
Subject key identifier: 64:9E:A6:63:72:5A:81:27:CF:25:BA:20:8E:00:A1:1B:0D:4A:9D:12
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial: 0377
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number: 035E
Signing time: Mon 11 May 2026 01:05:43 +0000
Manifest this update: Mon 11 May 2026 01:05:42 +0000
Manifest next update: Mon 18 May 2026 01:05:42 +0000
Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: ysjv96iEAu0IfycgclbQa+Vk9Y/OT85eS0mbFqnXuzc=)
2: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: 384lM558CG+awOCq+Jp4xJkMm0eBCvPqegdL9GG+nvU=)
3: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: iAesf40760Ge7OkqHg9mpMk5sp26zXObALVRo0oegXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Validity
Not Before: May 11 01:05:42 2026 GMT
Not After : May 18 01:05:42 2026 GMT
Subject: CN=6a012b67-930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:4f:1b:60:79:6e:92:1f:a3:5d:24:bd:77:
10:41:98:cb:8b:a5:0f:1d:f6:29:6d:28:22:f0:54:
85:28:9e:d1:2a:7c:6a:fd:81:a3:c6:56:9c:f2:b5:
1c:69:50:65:af:4b:d4:2e:07:f1:e7:de:b4:7a:36:
70:6e:55:a4:5f:ac:c9:28:f1:91:68:1c:cf:5a:68:
56:a6:81:71:cd:c2:92:98:ac:0d:1e:63:7c:fe:44:
84:4b:27:3b:28:5a:b6:97:c2:16:26:dc:33:76:89:
dd:eb:8f:70:66:b7:f7:30:56:1f:9b:f5:44:20:0f:
f1:f8:85:a1:06:f1:78:48:b2:23:80:8f:2e:96:e0:
d0:96:43:81:cf:5e:c2:9b:fd:c0:5f:39:3d:76:86:
65:b0:b2:99:97:17:42:60:dc:27:85:2f:8b:56:80:
97:ee:2d:26:95:c8:9c:ec:d9:e1:aa:0c:81:93:48:
8d:3c:32:e7:ce:b3:a1:d9:7a:e7:15:2d:54:b7:c4:
d3:67:1c:ec:99:92:83:6f:36:50:fd:e5:4e:cc:13:
ce:cf:60:11:b4:71:aa:b4:01:65:c9:12:f3:d4:97:
eb:ea:3b:58:69:ef:bb:e4:b5:45:c3:d7:7b:71:fd:
11:77:9d:96:5e:6f:69:8b:a3:5f:6d:d1:02:6a:97:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9E:A6:63:72:5A:81:27:CF:25:BA:20:8E:00:A1:1B:0D:4A:9D:12
X509v3 Authority Key Identifier:
keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:80:df:a5:20:d9:26:cc:ef:63:19:38:e9:c9:2b:19:89:01:
f8:b4:09:d6:c5:bc:1e:50:d6:e6:3e:7a:25:64:90:a1:27:84:
9e:bb:73:2a:0b:b8:42:e6:91:86:82:10:84:38:6b:46:3a:47:
e3:38:91:3b:1b:f2:4d:8b:35:23:0b:a7:e3:4c:f1:eb:31:51:
ea:83:aa:23:fa:6f:f0:75:98:ee:dd:f1:48:a4:f2:42:83:62:
c4:a8:40:9b:5a:21:f2:7b:03:ff:c2:77:bd:bb:85:2f:1d:3d:
c9:91:2c:0f:73:66:d0:75:8c:17:10:f8:d1:45:c6:25:6e:cf:
48:5a:2d:05:c0:c2:9b:52:3e:0b:92:58:fc:47:97:d6:21:a3:
79:35:2b:b5:70:5b:4d:7e:88:8a:b0:22:8a:0a:46:35:e0:cd:
df:f2:ca:ea:41:e0:ce:32:03:ea:ba:fc:1c:11:b6:15:99:3e:
14:03:df:84:40:dd:51:2f:4a:31:91:83:e2:d1:80:57:7e:7f:
aa:33:78:2f:d3:0e:c9:c3:5a:d4:91:9e:1b:96:ee:c1:9b:b3:
b5:d1:74:ce:38:f8:97:90:91:2c:2e:6d:6b:d7:e4:e2:4c:e8:
81:33:7f:06:6c:65:7e:70:99:48:33:67:95:ac:f6:4d:cc:4d:
45:1f:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:25 2026 by rpki-client